https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T03:49:07.884388+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2023-45023 fkie_cve-2023-45023 2026-09-29T03:49:07.947076+00:00

The femanager extension 7 before 7.2.2 for TYPO3 has Incorrect Access Control: it lacks a check for permissions for the invitation component.

 https://vulnerability.circl.lu/vuln/ghsa-93j4-v838-8767 GHSA-93j4-v838-8767 — TYPO3 extension femanager Broken Access Control vulnerability 2026-09-29T03:49:07.947244+00:00

Affected: Packagist: in2code/femanager

femanager fails to check access permissions for the invitation component. Depending on the configuration of the plugin, a remote user can create frontend user accounts with access to configured frontend groups.

 https://vulnerability.circl.lu/vuln/gsd-2023-45023 gsd-2023-45023 2026-09-29T03:49:07.947318+00:00 gsd-2023-45023 https://vulnerability.circl.lu/vuln/wid-sec-w-2023-2546 WID-SEC-W-2023-2546 — TYPO3 Extension(Femanager): Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2026-09-29T03:49:07.947357+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in der TYPO3 Extension Femanager ausnutzen, um Sicherheitsvorkehrungen zu umgehen.